Privacy policy

Updated: 2026-10-14. Start2Store provides lessons, tools and product research references for cross-border beginners.

Accounts and learning data

Registration collects a username, email and password. WordPress stores a password hash. Display names, membership state, saved products, lesson progress, surveys, projects and product-check jobs may be stored on our server to provide these features. Registration and login abuse controls use short-lived digests derived from network addresses; these are separate from analytics. Hostinger access or security logs may include network addresses.

Browser storage

localStorage and sessionStorage save language, theme, saved products, lesson progress, workspace, cost records, assessments and interface state. Some signed-in records also sync to your account. Clearing browser data can remove records held only on your device. Existing storage keys remain in use after the rename.

Our own traffic statistics

We aggregate page views, referring websites, language, device category and events for registration, lesson starts and completions, product opens, submitted checks and workspace opens by UTC day. Referrers contain only scheme and hostname, with no path, query or fragment. Analytics stores no raw IP, account ID, product URL, persistent visitor identifier or analytics cookie. Collection stops when Do Not Track (DNT) or Global Privacy Control (GPC) is enabled. Aggregates are retained for 365 days and are available only to site administrators. No third-party analytics is used.

Product checks and third parties

A check stores your CJ product link, product information and optional competitor links. The backend may query CJ for products, variants, stock and freight, and send product titles, attributes, images and reference links to DeepSeek for matching or analysis. Competitor links are recorded for reference; this does not imply that we scrape competitor pages. Account passwords and login cookies are not sent to these services. CJ and DeepSeek process submitted information under their own policies. L1 daily CJ collection has DeepSeek disabled; other existing check features depend on the actual service status.

Cookies and external content

WordPress uses essential wordpress_logged_in_* and wordpress_sec_* login cookies; remembered logins usually last up to 14 days. The admin area may use wordpress_test_cookie, wp-settings-* and wp-settings-time-*. We add no advertising or analytics cookies. External product pages, CJ, practice websites and video providers may use their own cookies and process requests when opened.

Access, deletion and contact

Update your profile in Account and manage local records in Settings. Contact the operator to request export or deletion of server-side account data. Contact email: To be announced. Please do not submit sensitive or confidential materials before a contact channel is published.